Date: 2026-02-06
Target: single-node cluster drg-k8s.auth.home.lan with ingress-nginx and local-path storage.
gitea: Gitea and its DB (if in-cluster).argocd: Argo CD (GitOps).Recommended Kubernetes objects:
Deployment/gitea (or Helm-managed Deployment)Service/gitea (ClusterIP)Ingress/gitea (nginx class)PersistentVolumeClaim/gitea-data (stores /data)If using in-cluster Postgres:
StatefulSet/postgres with PVCingress-nginx.Ingress cannot expose raw SSH.
Options:
NodePort service for SSH (common on home LAN setups).hostPort on the node (keep strict security controls).If SSH clones are not required, prefer HTTP(S)-only.
local-path StorageClass./srv/system-documentation.Minimum:
kubectl logs.